[Openstack] Essex keystone with remote glance endpoint

Jason Hedden jhedden at mcs.anl.gov
Mon Mar 19 17:13:47 UTC 2012


When following the documentation at https://review.openstack.org/#change,5190 I'm having trouble getting Glance to authenticate via Keystone.  I have this working when everything is installed on a single system, but can't seem to find any winning combinations to get a multi-host installation working.

# glance  -I adminUser -K ... -S keystone -N http://192.168.131.141:5000/v2.0' index
Failed to show index. Got error:
Response from Keystone does not contain a Glance endpoint.

Keystone appears to be working, or at least passing basic tests:
keystone # curl -d '{"auth": {"tenantName": "service", "passwordCredentials":{"username": "glance", "password": "glance"}}}' -H "Content-type: application/json" http://192.168.131.141:35357/v2.0/tokens | python -mjson.tool
http://paste.openstack.org/show/11078/

Host details:
Keystone host (192.168.131.141):
keystone # lsb_release -d; uname -a; dpkg -l | grep keystone
Description:	Ubuntu precise (development branch)
Linux ubuntu 3.2.0-17-generic #27-Ubuntu SMP Fri Feb 24 15:37:36 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux
ii  keystone                         2012.1~rc1~20120316.2145-0ubuntu1 OpenStack identity service - Daemons
ii  python-keystone                  2012.1~rc1~20120316.2145-0ubuntu1 OpenStack identity service - Python library
ii  python-keystoneclient            2012.1~rc1~20120310.0-0ubuntu1    Client libary for Openstack Keystone API

Glance host (192.168.131.142):
glance # lsb_release -d; uname -a; dpkg -l | egrep "glance|keystone"
Description:	Ubuntu precise (development branch)
Linux ubuntu 3.2.0-17-generic #27-Ubuntu SMP Fri Feb 24 15:37:36 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux
ii  glance                           2012.1~rc1~20120316.1354-0ubuntu1 OpenStack Image Registry and Delivery Service - Daemons
ii  glance-api                       2012.1~rc1~20120316.1354-0ubuntu1 OpenStack Image Registry and Delivery Service - API
ii  glance-client                    2012.1~rc1~20120316.1354-0ubuntu1 OpenStack Image Registry and Delivery Service - Registry
ii  glance-common                    2012.1~rc1~20120316.1354-0ubuntu1 OpenStack Image Registry and Delivery Service - Common
ii  glance-registry                  2012.1~rc1~20120316.1354-0ubuntu1 OpenStack Image Registry and Delivery Service - Registry
ii  python-glance                    2012.1~rc1~20120316.1354-0ubuntu1 OpenStack Image Registry and Delivery Service - Python library
ii  python-keystone                  2012.1~rc1~20120316.2145-0ubuntu1 OpenStack identity service - Python library
ii  python-keystoneclient            2012.1~rc1~20120310.0-0ubuntu1    Client libary for Openstack Keystone API

Keystone configuration @ http://paste.openstack.org/show/11080/
Glance configuration:
#/etc/glance/glance-[api | registry]-paste.ini
[filter:authtoken]
paste.filter_factory = keystone.middleware.auth_token:filter_factory
service_protocol = http
service_host = 192.168.131.141
service_port = 5000
auth_host = 192.168.131.141
auth_port = 35357
auth_protocol = http
auth_uri = http://192.168.131.141:5000/
admin_tenant_name = service
admin_user = glance
admin_password = glance

#/etc/glance/glance-[api | registry].conf
[paste_deploy]
flavor = keystone

Thanks,
-Jason






More information about the Openstack mailing list